Overview

overview

10

Static

static

10

2024-02-01...er.exe

windows7-x64

9

2024-02-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-01_07cd00b46074fcc619d1570f18d8c455_cryptolocker

  • Size

    38KB

  • Sample

    240201-tvq83sbfhp

  • MD5

    07cd00b46074fcc619d1570f18d8c455

  • SHA1

    0d562f1fea52648fdedec2980fd52512a5b9d3c0

  • SHA256

    6782bc77a07d6789b6148150e2bcad51345e8dfa0108313cc6bfce6e4eb2f300

  • SHA512

    4f3766efcba3f5217879a4d450b460479b3a4a4b9b5d4ef28fcee028c3f1c7cf3ad3eda57d507be6236974b8e342df49b508bc3e4acfa0e8c660ca523ad71c33

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqhMx7a:6j+1NMOtEvwDpjrf7a

Score
10/10

Malware Config

Targets

    • Target

      2024-02-01_07cd00b46074fcc619d1570f18d8c455_cryptolocker

    • Size

      38KB

    • MD5

      07cd00b46074fcc619d1570f18d8c455

    • SHA1

      0d562f1fea52648fdedec2980fd52512a5b9d3c0

    • SHA256

      6782bc77a07d6789b6148150e2bcad51345e8dfa0108313cc6bfce6e4eb2f300

    • SHA512

      4f3766efcba3f5217879a4d450b460479b3a4a4b9b5d4ef28fcee028c3f1c7cf3ad3eda57d507be6236974b8e342df49b508bc3e4acfa0e8c660ca523ad71c33

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqhMx7a:6j+1NMOtEvwDpjrf7a

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks